Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
File: DoNbiW2nHS2q3_E51ltymPhBJBc.mft (raw, json)
Hash identifier: W9eiDuhEQN85mcocDPfWOSkB5EKJXpGa+EeOxlNBanU=
Subject key identifier: 81:71:6E:3C:FB:81:EE:F2:44:5E:0B:47:BF:FF:10:55:9F:19:9A:FF
Authority key identifier: 0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
Certificate issuer: /CN=0e835b896da71d2daadff139d65b7298f8412417
Certificate serial: 019367ECAF8C3C49F1FFE499AF1FAC7B9EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 10:03:04 +0000
Manifest this update: Tue 26 Nov 2024 10:03:04 +0000
Manifest next update: Wed 27 Nov 2024 10:03:04 +0000
Files and hashes: 1: DoNbiW2nHS2q3_E51ltymPhBJBc.crl (hash: dLyzFVKwrpf8f/4dcZw4in9hmG43eUpIWg5OJI1CBco=)
2: gqZqbl8bgZiYMRj424vElO7P6K8.roa (hash: Jv4rdhea3bNvrBpL+Xq0069YaSnnuYTyTtuhPGJQWuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:ec:af:8c:3c:49:f1:ff:e4:99:af:1f:ac:7b:9e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e835b896da71d2daadff139d65b7298f8412417
Validity
Not Before: Nov 26 10:03:04 2024 GMT
Not After : Nov 27 10:03:04 2024 GMT
Subject: CN=81716e3cfb81eef2445e0b47bfff10559f199aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:8e:40:3f:45:02:d8:34:3b:e1:1c:24:35:
12:e1:c7:d7:66:2f:26:d1:d2:74:51:6f:3b:21:72:
c6:2a:c1:38:f7:8c:80:35:cf:ac:c6:59:42:06:77:
a8:ff:03:d9:00:9a:1d:65:6c:27:c6:b6:40:47:dd:
5b:23:52:ef:c2:d5:91:a1:2d:fd:a8:04:8d:7d:7c:
19:8c:56:2d:f0:7c:22:da:b9:a1:40:80:8c:df:25:
44:5e:83:96:8c:22:e3:42:b9:fa:ed:a4:36:79:97:
69:5a:fb:b7:3f:c6:5b:70:4b:6e:b6:a9:50:83:8d:
7c:50:c8:5a:18:e4:53:3a:8b:3c:86:c1:cf:20:a2:
d1:ff:5c:8a:9a:6d:6d:b9:6e:3d:a5:f9:05:8b:a5:
76:0d:a8:f4:ce:40:9e:97:a2:de:67:be:79:25:40:
51:2e:77:89:b1:98:b2:cd:bd:5d:5a:09:08:3b:43:
5e:c2:c1:71:4b:15:e2:db:9f:e6:89:1f:36:b0:f0:
97:16:0f:3d:7a:53:9b:3b:f9:97:e7:0e:71:c6:3d:
85:6b:30:70:5e:d7:86:0b:38:c9:42:3e:d7:5e:9d:
dc:52:0d:e6:a1:7b:b7:9e:2b:07:ec:71:a7:47:99:
2f:1e:d1:ef:87:c7:3e:44:ed:ba:c6:97:1d:ea:9a:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:71:6E:3C:FB:81:EE:F2:44:5E:0B:47:BF:FF:10:55:9F:19:9A:FF
X509v3 Authority Key Identifier:
keyid:0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:41:dc:c4:ae:d8:11:6f:db:fb:5d:fc:84:8e:72:8c:94:8f:
34:24:81:9c:03:1c:66:ae:b8:e2:78:18:d3:ba:f0:61:de:dc:
86:10:0c:25:67:32:fb:a9:12:54:fe:92:c8:5e:c2:4e:01:12:
b6:c5:84:b6:99:7d:ee:1a:d3:26:45:91:a7:fa:ba:7e:fe:12:
a4:f4:8b:af:36:04:1c:55:fc:76:ba:bc:41:c4:d5:71:86:5b:
3f:68:1e:56:11:d7:5d:e4:3c:0c:28:00:b3:d7:1c:b1:7d:f6:
dd:4c:46:43:3a:b5:82:1f:5c:5b:80:0c:70:09:c3:8c:ac:af:
85:25:67:6f:32:07:c3:ab:d2:21:71:5c:79:0e:87:57:a0:aa:
03:1b:e3:f3:35:4c:b0:14:d7:b0:f8:f9:0b:52:06:d3:b5:46:
63:da:79:f9:7e:91:be:a1:2b:9d:f3:96:46:1e:2d:c2:3e:45:
fa:be:6c:43:7a:18:65:11:62:fd:d6:ec:ed:74:e1:4a:91:64:
3a:89:ac:28:b3:74:48:9e:4f:7f:6d:6b:1d:59:5b:47:78:41:
9a:ed:4c:8d:60:46:12:bb:60:4c:f0:0e:67:ad:18:f9:05:2b:
be:3a:87:35:22:ec:0c:8f:5a:30:7b:f5:bf:bd:d2:48:bd:09:
56:69:11:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:21:34 2024 by rpki-client on console-fra.rpki-client.org